winapi - Hooking NtQueryDirectoryFile can't hide files -

-

i want hide files (in program). decided use ntquerydirectoryfile. files not hidden, code not work. don't use driver, use user mode. can me please?

the code snippet:

typedef ntstatus (winapi * ntquerydirectoryfile) (in handle filehandle,in handle event optional,in pio_apc_routine apcroutine optional,in pvoid apccontext optional,out pio_status_block iostatusblock,out pvoid fileinformation,in ulong fileinformationlength,in myfile_information_class fileinformationclass,in boolean returnsingleentry,in punicode_string filename optional,in boolean restartscan);  ntquerydirectoryfile originalntquerydirectoryfile;  #define status_no_such_file 0xc000000f  ntstatus   hookedntquerydirectoryfile(         in handle filehandle,         in handle event optional,         in pio_apc_routine apcroutine optional,         in pvoid apccontext optional,         out pio_status_block iostatusblock,         out pvoid fileinformation,         in ulong fileinformationlength,         in myfile_information_class fileinformationclass,         in boolean returnsingleentry,         in punicode_string filename optional,         in boolean restartscan) {     ntstatus status = originalntquerydirectoryfile(filehandle,event,apcroutine,apccontext,iostatusblock,fileinformation,fileinformationlength,fileinformationclass,returnsingleentry,filename,restartscan);      vector<wstring> listdataforhidding;     listdataforhidding.push_back(l"afile.txt");     listdataforhidding.push_back(l"bfile.txt");     listdataforhidding.push_back(l"cfile.txt");     listdataforhidding.push_back(l"dfile.txt");      if (nt_success(status))     {         pmyfile_directory_information filedirectoryinfo, lastfiledirectoryinfo;         pmyfile_full_dir_information  lastfilefulldirectoryinfo, filefulldirectoryinfo;         pmyfile_both_dir_information  lastfilebothdirectoryinfo, filebothdirectoryinfo;         pmyfile_names_information     lastfilenamesinfo, filenamesinfo;          ulong offset = 0;         bool bneedhide = false;          switch (fileinformationclass)         {             case filedirectoryinformation :                 filedirectoryinfo = null;                                   {                     //filedirectoryinfo = (pvoid)((ulong)fileinformation + offset);                     filedirectoryinfo = (pmyfile_directory_information)((ulong)fileinformation + offset);                     lastfiledirectoryinfo = filedirectoryinfo;                      wstring wstrcurrfilename = filedirectoryinfo->filename;                     bneedhide = false;                     for(size_t index = 0; index < listdataforhidding.size(); index ++)                     {                          if(wstrcurrfilename.find(listdataforhidding[index]) != wstring::npos)                         {                              bneedhide = true;                             break;                         }                     }                      //if (filedirectoryinfo->filename[0] == 0x5f00)                     if(bneedhide == true)                     {                         if (!filedirectoryinfo->nextentryoffset)                         {                             if (lastfiledirectoryinfo) lastfiledirectoryinfo->nextentryoffset = 0;                             else status = status_no_such_file;                             return status;                         } else                          if (lastfiledirectoryinfo) lastfiledirectoryinfo->nextentryoffset += filedirectoryinfo->nextentryoffset;                                             }                      offset += filedirectoryinfo->nextentryoffset;                  } while (filedirectoryinfo->nextentryoffset);              break;              case filefulldirectoryinformation :                 filefulldirectoryinfo = null;                                 {                     lastfilefulldirectoryinfo = filefulldirectoryinfo;                     //filefulldirectoryinfo = (pvoid)((ulong)fileinformation + offset);                     filefulldirectoryinfo = (pmyfile_full_dir_information)((ulong)fileinformation + offset);                      wstring wstrcurrfilename = filedirectoryinfo->filename;                     bneedhide = false;                      for(size_t index = 0; index < listdataforhidding.size(); index ++)                     {                          if(wstrcurrfilename.find(listdataforhidding[index]) != wstring::npos)                         {                                 bneedhide = true;                             break;                         }                     }                      //if (filefulldirectoryinfo->filename[0] == 0x5f00)                     if(bneedhide == true)                     {                         if (!filefulldirectoryinfo->nextentryoffset)                         {                             if (lastfilefulldirectoryinfo) lastfilefulldirectoryinfo->nextentryoffset = 0;                             else status = status_no_such_file;                             return status;                         } else                          if (lastfilefulldirectoryinfo) lastfilefulldirectoryinfo->nextentryoffset += filefulldirectoryinfo->nextentryoffset;                     }                      offset += filefulldirectoryinfo->nextentryoffset;                  } while (filefulldirectoryinfo->nextentryoffset);             break;              case filebothdirectoryinformation :                 filebothdirectoryinfo = null;                                 {                     lastfilebothdirectoryinfo = filebothdirectoryinfo;                     //filebothdirectoryinfo = (pvoid)((ulong)fileinformation + offset);                     filebothdirectoryinfo = (pmyfile_both_dir_information)((ulong)fileinformation + offset);                      wstring wstrcurrfilename = filedirectoryinfo->filename;                     bneedhide = false;                      for(size_t index = 0; index < listdataforhidding.size(); index ++)                     {                          if(filebothdirectoryinfo->filenamelength > 1 && wstrcurrfilename.find(listdataforhidding[index]) != wstring::npos)                         {                              bneedhide = true;                             break;                         }                     }                      //if (filebothdirectoryinfo->filenamelength > 1 && filebothdirectoryinfo->filename[0] == 0x5f00)                     if(bneedhide == true)                     {                         if (!filebothdirectoryinfo->nextentryoffset)                         {                             if (lastfilebothdirectoryinfo) lastfilebothdirectoryinfo->nextentryoffset = 0;                             else status = status_no_such_file;                             return status;                         } else                          if (lastfilebothdirectoryinfo) lastfilebothdirectoryinfo->nextentryoffset += filebothdirectoryinfo->nextentryoffset;                     }                      offset += filebothdirectoryinfo->nextentryoffset;                  } while (filebothdirectoryinfo->nextentryoffset);             break;              case filenamesinformation :                 filenamesinfo = null;                                 {                     lastfilenamesinfo = filenamesinfo;                     //filenamesinfo = (pvoid)((ulong)fileinformation + offset);                     filenamesinfo = (pmyfile_names_information)((ulong)fileinformation + offset);                      wstring wstrcurrfilename = filedirectoryinfo->filename;                     bneedhide = false;                      for(size_t index = 0; index < listdataforhidding.size(); index ++)                     {                          if(wstrcurrfilename.find(listdataforhidding[index]) != wstring::npos)                         {                               bneedhide = true;                             break;                         }                     }                      //if (filenamesinfo->filename[0] == 0x5f00)                     if(bneedhide == true)                     {                         if (!filenamesinfo->nextentryoffset)                         {                             if(lastfilenamesinfo) lastfilenamesinfo->nextentryoffset = 0;                             else status = status_no_such_file;                             return status;                         } else                          if (lastfilenamesinfo) lastfilenamesinfo->nextentryoffset += filenamesinfo->nextentryoffset;                     }                      offset += filenamesinfo->nextentryoffset;                 } while (filenamesinfo->nextentryoffset);              break;         }     }      return status; }


Popular posts from this blog

How to calculate SNR of signals in MATLAB? -

-
i've encountered simple, yet fundamental problem on calculating snr: there several signals : s1 = original , pure clean signal without noise. n1 = white gaussian noise going added s1. s2 = s1 + n1 (the noisy signal before performing noise-reduction algorithm) s3 = noise-reduced signal (after performing noise reduction algorithm) n2 = s3 - s1 (the amount of noise after performing noise-reduction algorithm) now want compare snr before , after performing noise-reduction algorithm. which signals should consider snr_before!? s1/n1 or s2/n1 ? which signals should consider snr_after!? s3/n1 or s3/n2 ? which commands or functions should use in matlab in order compute snr_before , snr_after? thanks billion putting time on helping me. what know calculating snr before : snrbeforenoise = mean( signal .^ 2 ) / mean( noise .^ 2 ); and snr after : residual_noise = signal - noise_reduced_signal; snr_after = mean( signal .^ 2 ) / mean( residual_noise .^ 2...
Read more

c# - Attempting to upload to FTP: System.Net.WebException: System error -

-
i have api takes in xml , uploads files based on information in xml. uploads on schedule (also xml), , have tested surrounding , know works. i getting error 40% of time on first file attempt upload in each time cycle (time cycle = 45 minutes files, 30 minutes others). here code upload: try { loggerftp.log("uploading file: " + filename, false); // create request. ftpwebrequest request = (ftpwebrequest)webrequest.create(appsettingsftp.ftpurl + @"/" + filename); request.method = webrequestmethods.ftp.uploadfile; request.timeout = 6000000; //set 100 minutes //request.timeout = -1; //set infinite // add login credentials. request.credentials = new networkcredential(appsettingsftp.ftplogin, appsettingsftp.ftppassword); // grab file contents. streamreader sourcestream = new streamreader(appsettingsftp.uploadfiledirectory + filename); byte[] filecontents = encoding.utf8.getbytes(sourcestream.readtoend()); sourcest...
Read more

ios - UISlider customization: how to properly add shadow to custom knob image -

-
Image
i need place custom knob image shadow uislider. far have image of 38x38, of there region defines shadow of knob. now while using image, when slide knob extreme ends actual knob not able cover end points, hence end points visible under transparent region of knob image this code using customize uislider uiimage *slidebtimg = [uiimage imagenamed:sliderknobimg]; [self.ratingslider setthumbimage:slidebtimg forstate:uicontrolstatenormal]; [self.ratingslider setthumbimage:slidebtimg forstate:uicontrolstatehighlighted]; how can implement custom knob shadow beneath it, covering end points?? look inside uislider.h , there methods let customize slider knob , track needed. (ios 2.0 , above) // lets subclass lay out track , thumb needed - (cgrect)minimumvalueimagerectforbounds:(cgrect)bounds; - (cgrect)maximumvalueimagerectforbounds:(cgrect)bounds; - (cgrect)trackrectforbounds:(cgrect)bounds; - (cgrect)thumbrectforbounds:(cgrect)bounds trackrect:(cgrect)rect value:...
Read more